Re: ikectl ca certificate create fails due to invalid subjectAltName

2017-11-07 Thread Patrick Wildt
On Sun, Nov 05, 2017 at 09:19:04PM +0100, Patrick Wildt wrote: > On Wed, Oct 25, 2017 at 06:03:44AM -0700, j...@posteo.de wrote: > > The patched submitted by Andrei fixed it for me. > > There are some style issues, I fixed the ones I saw and reattached the > > patch. > > Good find by Andrei, I wil

Re: ikectl ca certificate create fails due to invalid subjectAltName

2017-11-05 Thread Patrick Wildt
On Wed, Oct 25, 2017 at 06:03:44AM -0700, j...@posteo.de wrote: > The patched submitted by Andrei fixed it for me. > There are some style issues, I fixed the ones I saw and reattached the > patch. > > Index: ikeca.c > === > RCS file:

Re: ikectl ca certificate create fails due to invalid subjectAltName

2017-10-25 Thread j...@posteo.de
The patched submitted by Andrei fixed it for me. There are some style issues, I fixed the ones I saw and reattached the patch. Index: ikeca.c === RCS file: /cvs/src/usr.sbin/ikectl/ikeca.c,v retrieving revision 1.46 diff -u -p -r1.46

Re: ikectl ca certificate create fails due to invalid subjectAltName

2017-10-25 Thread damageg
I'm seeing the same thing in 6.2. -- Sent from: http://openbsd-archive.7691.n7.nabble.com/openbsd-dev-bugs-f183916.html

ikectl ca certificate create fails due to invalid subjectAltName

2017-08-15 Thread Andrei-Marius Radu
Hello, I'm running the latest snapshot and I've found that I cannot create certificates with ikectl. It fails due to the fact that the request contains an invalid subjectAltName of only 'IP:' or 'DNS:'. In turn this is due to the fact that in the OpenSSL config file the variable names are 'IP:$ENV